Privacy Policy

Last updated: April 2026

Introduction

Elvora ("we", "us" or "our") respects your privacy. In this Privacy Policy, we explain what personal data we collect when you visit our website, place an order, contact us, or otherwise make use of our services (the "Services"), why we process that data, and what rights you have.

Elvora is a trading name of Ecom Dynasty Ltd, a company registered in England and Wales under company number 17092533, primarily serving customers in the United Kingdom. We comply with both the UK General Data Protection Regulation (UK GDPR) and the EU General Data Protection Regulation (EU GDPR) as applicable.

Our webshop runs on Shopify. Shopify provides the e-commerce platform through which we offer our products and services.

Who is responsible for your data?

The controller responsible for the processing of personal data via this webshop is Ecom Dynasty Ltd, trading as Elvora. Full contact details are listed at the end of this policy.

What personal data do we process?

Depending on how you use our Services, we may process the following data:

a) Identification and contact details

Name
Email address
Phone number
Billing address and delivery address

b) Order and transaction data

Ordered products
Order number
Payment status and limited payment information (payments are processed via Stripe Payments Europe, Limited; we do not receive your full card details)
Return and exchange data
Customer service communications regarding your order

c) Communication data

Content of messages you send us (email or contact form)
Attachments you include (for example, photos submitted with a complaint)

d) Technical and usage data

IP address
Browser and device information
Log files
Interactions on the website (pages viewed, click behaviour)
Cookies and similar technologies (see "Cookies" below)

Sources of personal data

We obtain personal data:

Directly from you (when placing an order or contacting us)
Automatically via the website (cookies, log files)
Via service providers (Shopify, payment providers, shipping partners, analytics partners)

Data from suppliers and logistics partners includes order tracking information from shipping partners and product return information from suppliers. We only receive data necessary for order fulfilment and customer service.

Why do we process your personal data?

a) Orders and fulfilment of the agreement

Processing and delivering orders
Processing payments
Handling returns and refunds
Sending order updates and service messages

b) Customer service

Answering questions and providing support via email and contact form
Resolving complaints and issues

For information about our return policy, please see our Returns and Refunds Policy. For returns, we process data such as return reasons and product status solely for the purpose of handling your return and any associated refund.

c) Improving the website and security

Website security, fraud prevention, and abuse detection
Analysis to improve the webshop and customer experience

d) Marketing (where permitted)

Sending newsletters or offers (with consent where required; you can unsubscribe at any time)

e) Legal obligations

Administration and tax obligations
Evidence in disputes or compliance with legislation

Legal bases (UK GDPR and EU GDPR)

We process your personal data on the basis of one or more of the following legal grounds:

Performance of a contract (for example, purchase and delivery)
Legal obligation (for example, statutory retention for tax purposes)
Legitimate interest (for example, fraud prevention, basic analytics, customer service improvement)
Consent (for example, newsletter subscription and certain cookies, where required)

With whom do we share personal data?

We share personal data only when necessary for our services, legal obligations, or with your consent. Our processors and recipients include:

Shopify (webshop platform and hosting)
Stripe Payments Europe, Limited (payment processing)
Shipping and fulfilment partners (to deliver your parcel)
IT and support service providers (hosting, email tools)
Analytics and advertising partners (only to the extent permitted via cookies and consent)

We do not sell your personal data.

Analytics and advertising partners

Google Analytics (website statistics and user behaviour)
Google Ads (remarketing and conversion tracking)
Klaviyo (email marketing, if you have subscribed)

These partners may place cookies to track browsing behaviour for analytics and advertising purposes. You can decline these cookies via our cookie settings.

International transfers

Elvora is based in the United Kingdom. Personal data may be transferred between the UK and the EEA, and to third countries where our service providers operate (such as Shopify, Stripe, and Google).

Where personal data is transferred outside the UK or the EEA, we ensure appropriate safeguards are in place in accordance with the UK GDPR and the EU GDPR, such as:

Standard Contractual Clauses (SCCs) approved by the European Commission
International Data Transfer Agreements (IDTAs) or the UK Addendum to SCCs, as required under UK law
Adequacy decisions (countries recognised as providing an adequate level of data protection)

The UK has been granted an adequacy decision by the European Commission, meaning personal data can flow freely between the EEA and the UK.

Cookies and similar technologies

We use cookies and similar technologies to:

Ensure the website functions properly (essential cookies)
Gain insight into website usage (analytics)
Enable marketing and personalised advertising (marketing cookies)

When you visit our website, we ask for your consent via a cookie banner for non-essential cookies (analytics and marketing).

Necessary cookies are always placed
Analytics and marketing cookies are placed only after your explicit consent
You can withdraw your consent at any time via the cookie settings
If you decline, we only place technically necessary cookies

You can also manage your cookie preferences via your browser settings. Please note: disabling certain cookies may affect the functioning of the site.

Retention periods

We do not retain personal data longer than necessary. Guidelines:

Order and invoice data: as long as required under applicable tax legislation (typically 6 years in the UK)
Customer service communications: as long as necessary for handling and any disputes
Marketing data: until you unsubscribe or withdraw consent

Marketing communications

We only send marketing emails if you have explicitly opted in. You can unsubscribe via the link at the bottom of every email. After unsubscribing, we remove your email address from our marketing list.

Security

We take appropriate technical and organisational measures to protect your data against loss, misuse, and unauthorised access. No system is 100% secure; please take care when sharing sensitive information via unsecured channels.

Your rights

Under both the UK GDPR and the EU GDPR, you have (subject to conditions) the following rights:

Right of access
Right to rectification (correction)
Right to erasure ("right to be forgotten")
Right to restriction of processing
Right to data portability
Right to object (including against direct marketing)
Right to withdraw consent (where processing is based on consent)

You can submit a request via info@elvoraco.com. We may ask you to verify your identity. We aim to respond to all requests within one month.

Complaints

If you believe we are not handling your personal data correctly, please let us know first so we can resolve the matter.

You also have the right to lodge a complaint with the relevant supervisory authority:

For UK residents: Information Commissioner's Office (ICO), www.ico.org.uk, 0303 123 1113
For EEA residents: your local data protection authority. A full list is available at https://edpb.europa.eu/about-edpb/about-edpb/members_en

Children's data

Our Services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently received data from a child, please contact us and we will delete it where appropriate.

Automated decision-making

We do not use automated decision-making or profiling that has legal consequences for you, or that significantly affects you.

One exception: our payment system (Stripe) uses automated fraud detection to block suspicious transactions, for the protection of both you and our webshop. You can contact us if you believe a payment has been blocked incorrectly.

Changes to this Privacy Policy

We may update this Privacy Policy (for example, due to changes in legislation or our services). The most recent version is always available on our website. For significant changes, we will provide additional notice where appropriate.

Elvora is a trading name of Ecom Dynasty Ltd, a company registered in England and Wales under company number 17092533.

Registered office: Office 9278af, 182-184 High Street North, Area 1/1, East Ham, London E6 2JA, United Kingdom
Email: info@elvoraco.com
Phone: +44 7520 654517
Website: https://elvoraco.com
Opening hours: Monday to Friday, 9:00 AM to 6:00 PM GMT
Response time: Within 24 hours during business days

← Back to Home